Sometimes we drop the word "caught" and simply say someone "had their hand in the cookie jar." We often use this expression when we are making fun of the situation. That doesn't mean it is not important. It can be very important. But this expression permits us to make a little fun ...